Job description

ADP is Hiring a Sr. Cybersecurity Analyst (CIRC) Unlock Your Career Potential: Global Security Organization at ADP. Do you have a passion for going on the offensive to safeguard critical information? As ADP's Global Security Organization (GSO), we know that our clients rely on us for human capital management solutions, but beyond that, they entrust us with one of their most valuable assets -- their employee data. We are honored by this trust and are laser focused on securing data at every step in the information lifecycle, ensuring integrity, confidentiality and compliance with industry and government regulations at all times. From the cloud to the data center and across every emerging device, you'll join a team of experts in the GSO who are always staying one step ahead in this ever-changing world of data by continually evolving our strategies and technologies to protect ADP and our clients. Ideal candidates should be experienced in multiple technical security skills such as: * Incident Response * Intrusion Detection * Endpoint Defense * Malware Analysis * Malicious Code * Automation / Coding Position Summary: Providing around-the-clock protection and cyber defense of ADP's global network of applications and data from threats from cyberspace is pivotal to the success of ADP's globally recognized brand and the continued growth of ADP's $10B market share. The Critical Incident Response Center (CIRC) Analysts are responsible for detect and response activities for ADP globally across a broad set of security disciplines -- including cyber operations, fraud prevention, physical security, and operational risk management. Analysts must have a holistic understanding of the modern physical and cyber security landscape and will liaise with other Business and Security Teams, Legal, Privacy, Communications, Public Relations and the Business Units teams to triage any and all ADP internal, potential consumer, client or other issues related to Security Incidents. Analysts will rapidly gather information to investigate alerts, determine criticality, risk, and business impact in order to take appropriate measures for containment and assist with or recommend remediation efforts. Like what you see? Apply now! Learn more about ADP at tech.adp.com/careers Responsibilities: • As a key member of a Critical Incident Response Center the Senior Analyst will investigate security alerts from multiple sources, determines their criticality and promptly apply appropriate containment and mitigation measures • Lead complex investigations working with cross-functional, geo-dispersed teams in large enterprise environments • Take ownership of alert investigations and drive them to resolution, demonstrate technical leadership and serve as a mentor to junior analysts on the team • Perform Event Monitoring and Log Analysis for all Cyber Alerts in a centralized and prioritized queue • Enrich and Correlate IOC’s from active investigations to identify other potential security incidents • Collaborate with multiple GSO teams to support their investigations as necessary • Review intel from various intelligence sources and identify any indicators of attacks that may be focused on ADP or identify any activities from threat actors that may have an interest in ADP • Conduct technical analysis and assessments of security related incidents, including malware analysis, packet level analysis, and system level forensic analysis • Conduct analysis of network events from various device types and vendors from multiple technologies and products • Capture files, artifacts, logs, registry entries or other host based evidence • Initiate, Support and Lead various investigative incident response tasks during an incident at various stages of the incident • Document the Analysis and activities as it pertains to the alert details, the response performed for containment and remediation steps along with the supporting artifacts and evidence for justification • Facilitate the escalation process and interactions with external teams. This includes prioritizing incidents during activity time frames and including advanced teams • Assist in the development and maintenance of new processes and documentation including newly developed correlation rules to help our analysts continually improve to engage the current threats. • Utilizing the intelligence from various sources and coordinating with internal teams, help test new alert detections that support the monitoring and enforcement of the ADP security policies while helping improve existing alerts to reduce False positive rates • Manage multiple alerts and investigations simultaneously while participating in adhoc CIRC Projects and Operational Improvement activities • Participate in Purple team exercises and post-exercise activities To Succeed in This Role: • You’ll have a bachelor’s degree in computer systems engineering, Computer Science, Computer Information Systems or equivalent education and experience required. Qualifications Required: • Specialized training in information security helpful. • Security Certifications are a plus but not required. CISSP, GSEC, GCIA, GCIH, GREM • Similar Security roles with relevant analysis experience in a large Corporate environment is highly recommended • 6 Years combined actual Security Analysis and Incident Response Experience • Networking Skills - Strong experience in Windows and *nix environments. Excellent understanding of TCP/IP and network communications. Strong network administration skills. Packet-level behavioral familiarity with most major TCP/IP application protocols. General understanding of key components of internet architecture. • Incident Handling - Excellent computer security incident handling, analytical and communication skills. Familiarity with interpreting the log output of a wide selection of device classes including networking and host Infrastructure devices. In depth knowledge of computer security forensics and security vulnerabilities. Broad knowledge of business-impacting security scenarios and viable methods to detect these scenarios (Cross device log correlation) • Operating Systems - Strong systems administration skills. Conceptual knowledge of operating system internals (file handles, threads, semaphores, stack, heap, entry points). Implementation experience with general enterprise core service types (web/mail/dns/file servers) • Security Tools & Technologies - Well versed in multiple security technologies such as SIEM, DPI, GRC, Antivirus, Intrusion Detection & Prevention Systems, Cloud/AWS, EDR, XDR, UBA, Web Proxy/Content Filtering, Active Directory, PKI, Radius, RSA SecurID, MFA • Malware Analysis - Reverse-engineering and executable analysis skills. Experience in reverse-engineering script content in multiple formats. Knowledge of how to operate a debugger. Knowledge of basic packing and obfuscation techniques. Broad knowledge of data and executable file types and extracting information from them. Functional knowledge of Shellcode fundamentals • Scripting / Development - Enough SQL familiarity to generate nested queries and joins in a major SQL dialect. General experience with systems automation in a major scripting language. General knowledge of web content scripting languages. Functional experience with text and data representation and manipulation (XML, HTML, Regular Expressions, Wiki Markup, SQL) YOU'LL LOVE WORKING HERE BECAUSE YOU CAN: • Have courageous team collaboration. Courage comes from how associates are willing to have difficult conversations, speak up, be an owner, and challenge one another's ideas to net out the best solution. • Deliver at epic scale. We deliver real user outcomes using strong judgment and good instincts. We're obsessed with the art of achieving simplicity with a focus on client happiness and productivity. • Be surrounded by curious learners. We align ourselves with other smart people in an environment where we grow and elevate one another to the next level. We encourage our associates to listen, stay agile, and learn from mistakes. • Act like an owner & doer. Mission-driven and committed to leading change, you will be encouraged to take on any challenge and solve complex problems. No tasks are beneath or too great for us. We are hands-on and willing to master our craft. • Give back to others. Always do the right thing for our clients and our community and humbly give back to the community where we live and work. Support our associates in times of need through ADP's Philanthropic Foundation. • Join a company committed to equality and equity. Our goal is to impact lasting change through our actions. What are you waiting for? Apply today! Find out why people come to ADP and why they stay: youtu.be (ADA version: youtu.be ) #LI-SD4 #LI-Hybrid Base salary offers for this position may vary based on factors such as location, skills, and relevant experience. Some positions may include additional compensation in the form of bonus, equity or commissions. We offer the following benefits: Medical, Dental, Vision, Life Insurance, Matched Retirement Savings, Wellness Program, Short-and Long-Term Disability, Charitable Contribution Match, Holidays, Personal Days & Vacation, Paid Volunteer Time Off, and more. The compensation for this role is USD $74,800.00 - USD $183,900.00 / Year* *Actual compensation will not be less than the applicable minimum wage or minimum exempt salary requirement under federal, state and local laws. A little about ADP: We are a comprehensive global provider of cloud-based human capital management (HCM) solutions that unite HR, payroll, talent, time, tax and benefits administration and a leader in business outsourcing services, analytics, and compliance expertise. We believe our people make all the difference in cultivating a down-to-earth culture that embraces our core values, welcomes ideas, encourages innovation, and values belonging. We've received recognition for our work by many esteemed organizations, learn more at ADP Awards and Recognition . Diversity, Equity, Inclusion & Equal Employment Opportunity at ADP: ADP is committed to an inclusive, diverse and equitable workplace, and is further committed to providing equal employment opportunities regardless of any protected characteristic including: race, color, genetic information, creed, national origin, religion, sex, affectional or sexual orientation, gender identity or expression, lawful alien status, ancestry, age, marital status, protected veteran status or disability. Hiring decisions are based upon ADP’s operating needs, and applicant merit including, but not limited to, qualifications, experience, ability, availability, cooperation, and job performance. Ethics at ADP: ADP has a long, proud history of conducting business with the highest ethical standards and full compliance with all applicable laws. We also expect our people to uphold our values with the highest level of integrity and behave in a manner that fosters an honest and respectful workplace. Click jobs.adp.com to learn more about ADP’s culture and our full set of values.

Requirements

Must-haves

ADP is Hiring a Sr. Cybersecurity Analyst (CIRC)
Unlock Your Career Potential: Global Security Organization at ADP.
We are honored by this trust and are laser focused on securing data at every step in the information lifecycle, ensuring integrity, confidentiality and compliance with industry and government regulations at all times.
Ideal candidates should be experienced in multiple technical security skills such as:
Incident Response
Intrusion Detection
Endpoint Defense
Malware Analysis
Malicious Code
Automation / Coding
Analysts will rapidly gather information to investigate alerts, determine criticality, risk, and business impact in order to take appropriate measures for containment and assist with or recommend remediation efforts.
Like what you see? Apply now!
Learn more about ADP at tech.adp.com/careers
Lead complex investigations working with cross-functional, geo-dispersed teams in large enterprise environments
Take ownership of alert investigations and drive them to resolution, demonstrate technical leadership and serve as a mentor to junior analysts on the team
Perform Event Monitoring and Log Analysis for all Cyber Alerts in a centralized and prioritized queue
Enrich and Correlate IOC’s from active investigations to identify other potential security incidents
Collaborate with multiple GSO teams to support their investigations as necessary
Review intel from various intelligence sources and identify any indicators of attacks that may be focused on ADP or identify any activities from threat actors that may have an interest in ADP
Conduct technical analysis and assessments of security related incidents, including malware analysis, packet level analysis, and system level forensic analysis
Conduct analysis of network events from various device types and vendors from multiple technologies and products
Capture files, artifacts, logs, registry entries or other host based evidence
Initiate, Support and Lead various investigative incident response tasks during an incident at various stages of the incident

Nice-to-haves

Security Certifications are a plus but not required. CISSP, GSEC, GCIA, GCIH, GREM

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

awssqlagile

Platform: career-feeds
Effort: medium

Benefits

Benefits detected in the listing.

Dental

Vision

Wellness